crypto/openssl: support truncated HMAC operations